InfoSec Manager

We are looking for an InfoSec Manager who will run the company’s day-to-day Governance, Risk, and Compliance (GRC) activities under GDS, including security documentation, client security reviews, enterprise InfoSec processes, certifications, privacy requirements, and security readiness. Strategic security direction and oversight will sit with the Fractional CISO , while the InfoSec Manager will be responsible for ensuring that agreed security and compliance processes are executed effectively across the business. This person will become the primary operational owner for InfoSec and GRC when enterprise clients request security reviews, questionnaires, vendor assessments, certifications, contractual security information, or compliance evidence. This role is important because the company needs a strong but practical InfoSec foundation to build client trust, demonstrate reliability, and ensure security, compliance, documentation, certifications, and data protection requirements are professionally managed. The focus is on applying security and compliance intelligently and proportionately, avoiding unnecessary process overhead or procurement blockers while maintaining appropriate risk controls. Key Responsibilities Own the full client-facing InfoSec process from initial security request through completion and approval. Manage enterprise security questionnaires, vendor assessments, compliance forms, procurement security documents, evidence collection, and follow-up actions. Drive new ISO readiness , including coordinating evidence, controls, audit preparation, remediation activities, and maintaining the ISMS on a day-to-day basis. Own operational GDPR and data protection activities , including DPAs, DPIAs, privacy/security assessments, and reviewing security and privacy clauses within client and vendor contracts. Maintain all company security materials, including trust page content, data-room documents, policies, procedures, certifications, architecture diagrams, compliance evidence, and supporting security documentation. Build and maintain a central InfoSec knowledge base containing approved standard responses, reusable evidence, and guidance for common enterprise security and privacy questions. Join client security calls when required and work with technical/data infrastructure owners to accurately explain architecture, hosting, data flows, access control, encryption, backup, logging, monitoring, incident response, and secure development practices. Work with leadership, engineering, infrastructure, QA, legal/privacy stakeholders, and client-facing teams to ensure security and compliance responses are accurate, consistent, proportionate, and professionally managed. Support new certifications, renewals, audits, assessments, recurring compliance reviews, and ongoing security evidence requests. Propose practical and proportionate security and compliance improvements across software development, deployment, cloud infrastructure, access…